jarir-ahmed/file

It has a clear MIT license, tests, and only one runtime dependency, which keeps adoption straightforward. The main concern is limited evidence of ongoing maintenance and project transparency; pin this version if you accept that risk.

Latest v1.2.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is about 707 days old with three releases, one release in the last 12 months, and a median interval of about 301 days. This is a slow cadence, though the latest release was published recently enough to avoid an abandonment conclusion.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. This is the clearest maintenance concern, although the latest push was on June 6, 2026.

Repo package mention

The repository name does not match the package name, while README mention status was not determined. A name mismatch can be normal for a subpackage, so this is only a limited transparency concern.

Repo popularity

The repository has zero stars and forks and one watcher. This provides little supporting evidence of community adoption, but low popularity alone is not a health verdict for a small package.

Repo tooling

Composer is used as the build tool, but no security scanning tool is configured. The missing scanner is a transparency and hygiene gap rather than evidence of unsafe behavior.